$ rpki-client -vvf repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft File: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft (raw, json) Hash identifier: 759i/iQ9yiZr6jEk1ZajEz7W3m2PBidqAe8kjIgP1sA= Subject key identifier: 8D:3C:91:F9:D5:A8:22:45:69:32:2F:DC:86:BD:0E:05:6D:38:54:5A Authority key identifier: 17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 Certificate issuer: /CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Certificate serial: 585FEA2F7176F52F2C85A2DD150607E5BEB03D9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft Manifest number: 0140 Signing time: Sat 19 Apr 2025 17:31:52 +0000 Manifest this update: Sat 19 Apr 2025 17:26:52 +0000 Manifest next update: Tue 22 Apr 2025 18:25:52 +0000 Files and hashes: 1: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl (hash: 9uUr70v44TzszpKnNqoNDqGUf9+m3juGWNkW0BKYIJc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 18:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:5f:ea:2f:71:76:f5:2f:2c:85:a2:dd:15:06:07:e5:be:b0:3d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Validity Not Before: Apr 19 17:26:52 2025 GMT Not After : Apr 22 18:25:52 2025 GMT Subject: CN=8D3C91F9D5A8224569322FDC86BD0E056D38545A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:58:5f:24:56:45:6f:54:80:03:d0:58:d9:e0: 8a:5b:7e:5a:08:6a:56:b4:ec:95:2e:15:34:3c:91: 88:39:7c:74:85:a6:d6:0a:c5:05:7b:69:9f:65:1f: 2c:f6:28:7e:72:7c:6b:cd:00:63:45:e8:2e:2d:46: 12:21:a4:a0:33:92:63:53:9d:5c:47:70:8f:7b:94: 93:6c:d7:70:45:45:27:c4:6c:fa:fa:8e:fe:e7:3b: 0e:9d:75:fa:b0:86:f2:da:33:62:2d:37:75:ab:c6: b2:64:1f:6e:49:76:c7:07:46:0d:5a:7a:7c:27:3a: ab:3e:ca:d9:59:53:4d:ef:b8:c4:c9:c4:b8:e8:d8: 79:c4:1d:c9:98:f7:a6:f5:4e:57:73:ca:0d:8a:50: ea:6a:1a:81:6f:d8:19:45:51:e2:00:1a:49:0e:85: 09:52:9f:f7:4c:10:1e:0b:0b:4c:22:dc:4d:63:7b: a3:df:d2:45:72:81:71:2e:b2:f2:ce:44:19:02:0c: 0d:2c:eb:6e:42:ca:9c:46:40:e6:88:01:14:23:67: 6e:06:cd:9a:98:bb:54:e0:70:32:fc:9c:a0:c9:9f: 9a:b9:cf:f7:c2:b3:40:41:b0:5f:c7:97:66:35:55: 84:18:70:e5:b8:09:16:41:ef:68:50:d2:51:48:2e: b4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3C:91:F9:D5:A8:22:45:69:32:2F:DC:86:BD:0E:05:6D:38:54:5A X509v3 Authority Key Identifier: keyid:17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:95:4f:f1:d9:e0:16:80:42:e9:1d:55:1f:cc:e1:3e:ba:25: 06:63:bd:65:1b:e5:07:48:e8:4c:2d:60:50:c5:7a:85:40:ca: f7:f1:58:48:62:01:09:59:da:20:ee:a0:2f:76:c9:2f:dc:cb: 27:7f:8d:45:5d:20:ea:5b:2e:7f:8f:68:c7:16:98:a0:72:e3: 22:11:8a:0a:cf:78:bb:a8:5a:f8:80:62:ea:2f:87:34:78:4b: 6e:5b:fc:01:83:83:46:3d:be:ff:6f:ce:bb:90:b2:1c:53:da: 30:64:35:3e:91:d7:95:35:98:e5:3d:2c:88:92:54:bd:aa:03: 40:02:71:a2:4a:0f:73:71:2a:54:17:a2:ae:38:0a:fd:11:08: cd:bc:25:e5:18:c2:de:7d:4a:51:73:28:37:99:40:15:9f:21: e3:d6:18:10:8c:99:f5:e2:24:8c:5a:77:6b:17:ed:16:a3:1b: 71:20:45:a2:0b:70:6d:e4:5b:7f:80:82:77:ee:d8:31:30:d8: ee:f3:82:3b:53:ca:17:69:9e:48:26:c8:7b:d5:a8:be:44:ca: 21:b5:95:12:a8:94:78:53:85:d0:06:af:ee:98:7e:ee:3a:75: 98:3c:00:8a:cf:6d:bc:0a:03:69:1e:e5:0c:3c:74:30:3b:fb: a6:44:50:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWF/qL3F29S8shaLdFQYH5b6wPZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNC RTBGREMyMTAeFw0yNTA0MTkxNzI2NTJaFw0yNTA0MjIxODI1NTJaMDMxMTAvBgNV BAMTKDhEM0M5MUY5RDVBODIyNDU2OTMyMkZEQzg2QkQwRTA1NkQzODU0NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWF8kVkVvVIAD0FjZ4IpbfloI ala07JUuFTQ8kYg5fHSFptYKxQV7aZ9lHyz2KH5yfGvNAGNF6C4tRhIhpKAzkmNT nVxHcI97lJNs13BFRSfEbPr6jv7nOw6ddfqwhvLaM2ItN3WrxrJkH25JdscHRg1a enwnOqs+ytlZU03vuMTJxLjo2HnEHcmY96b1Tldzyg2KUOpqGoFv2BlFUeIAGkkO hQlSn/dMEB4LC0wi3E1je6Pf0kVygXEusvLORBkCDA0s625CypxGQOaIARQjZ24G zZqYu1TgcDL8nKDJn5q5z/fCs0BBsF/Hl2Y1VYQYcOW4CRZB72hQ0lFILrTvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjTyR+dWoIkVpMi/chr0OBW04VFowHwYDVR0j BBgwFoAUF6YAfsY3PslQH5lW4SttXL4P3CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRlNGFmNy1iZjQ4LTRjYjgtOGY2My04MWNhZTE3MzY0ZGUvMC8xN0E2MDA3RUM2 MzczRUM5NTAxRjk5NTZFMTJCNkQ1Q0JFMEZEQzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNCRTBG REMyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZE NUNCRTBGREMyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeVT/HZ4BaAQukdVR/M4T66JQZjvWUb5QdI 6EwtYFDFeoVAyvfxWEhiAQlZ2iDuoC92yS/cyyd/jUVdIOpbLn+PaMcWmKBy4yIR igrPeLuoWviAYuovhzR4S25b/AGDg0Y9vv9vzruQshxT2jBkNT6R15U1mOU9LIiS VL2qA0ACcaJKD3NxKlQXoq44Cv0RCM28JeUYwt59SlFzKDeZQBWfIePWGBCMmfXi JIxad2sX7RajG3EgRaILcG3kW3+Agnfu2DEw2O7zgjtTyhdpnkgmyHvVqL5EyiG1 lRKolHhThdAGr+6Yfu46dZg8AIrPbbwKA2ke5Qw8dDA7+6ZEUEg= -----END CERTIFICATE-----Generated at Mon Apr 21 05:33:37 2025 by rpki-client